Critical
CVE-2018-8097
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
Unrated
CVE-2018-1000126
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. Th
Critical
CVE-2018-7750
Paramiko not properly checking authentication before processing other requests
Unrated
CVE-2018-1000083
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via
Unrated
CVE-2018-1000082
Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server
Unrated
CVE-2018-1000081
Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can
Unrated
CVE-2018-1000080
Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. This attack appear to be exploitable v
Critical
CVE-2018-1000089
django-anymail Includes Sensitive Information in Log Files
Low
CVE-2018-7537
Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters
Medium
CVE-2018-7536
Django denial-of-service possibility in urlize and urlizetrunc template filters
Unrated
CVE-2018-0525
Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
Unrated
CVE-2018-0524
Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.
Critical
CVE-2018-7753
Bleach URI Scheme Restriction Bypass
High
CVE-2018-7206
JupyterHub OAuthenticator elevation of privilege
High
CVE-2018-6188
Django vulnerable to information leakage in AuthenticationForm
Critical
CVE-2018-6596
Django-Anymail prone to a timing attack
High
CVE-2018-6594
Pycrypto generates weak key parameters
Medium
CVE-2018-5773
markdown2 is vulnerable to cross-site scripting
High
CVE-2014-1859
Numpy arbitrary file write via symlink attack
High
CVE-2014-1858
Arbitrary file write in NumPy
Medium
CVE-2017-1000484
Plone Open Redirect
Critical
CVE-2017-1000433
pysaml2 Improper Authentication vulnerability
Medium
CVE-2017-16876
mistune Cross-site scripting (XSS) vulnerability
Unrated
CVE-2017-17555
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of servic
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.